01 Record

CVE-2025-38400

nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.19% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 8.6% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-07-25 12:53Z1 YR AGO

Last updated

2026-07-14 12:42Z1 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-772Missing Release of Resource after Effective LifetimeBase

Data version

5.2

Document digest

d4afdd6a08b6021038d6a7ff8cfc20332e653b43b5f0ad523d56ea3f4af05381

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux31dd0cda5aa0547de447aaf184812f85ccc34044 to < 8785701fd7cd52ae74c0d2b35b82568df74e9dbb, 6eef21eb7a165601882dad0419a630e32d2d7a2c to < 412534a1fb76958b88dca48360c6f3ad4f3390f4, 0bbd429260821dfb81478749837d3e6377949ac6 to < b92397ce96743e4cc090207e2df2a856cb4cef08, 9dd86e9d34b1078dcd647220e96a205028bf4e6f to < 7701c245ff1ac1a126bf431e72b24547519046ff, 53a0365c9f9f66e1a981bf9188d8716d682e0739 to < d0877c479f44fe475f4c8c02c88ce9ad43e90298, d47151b79e3220e72ae323b8b8e9d6da20dc884e to < 3c94212b57bedec3a386ef3da1ef00602f5c3d1d, d47151b79e3220e72ae323b8b8e9d6da20dc884e to < 6acf340f8c1d296bcf535986175f5d0d6f2aab09, d47151b79e3220e72ae323b8b8e9d6da20dc884e to < e8d6f3ab59468e230f3253efe5cb63efa35289f7, e05194baae299f2148ab5f6bab659c6ce8d1f6d3, 5.4.276 to < 5.4.296, 5.10.217 to < 5.10.240, 5.15.159 to < 5.15.187, 6.1.91 to < 6.1.144, 6.6.31 to < 6.6.97, 6.8.10 to < 6.9, 6.9—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/8785701fd7cd52ae74c0d2b35b82568df74e9dbb
git.kernel.orghttps://git.kernel.org/stable/c/412534a1fb76958b88dca48360c6f3ad4f3390f4
git.kernel.orghttps://git.kernel.org/stable/c/b92397ce96743e4cc090207e2df2a856cb4cef08
git.kernel.orghttps://git.kernel.org/stable/c/7701c245ff1ac1a126bf431e72b24547519046ff
git.kernel.orghttps://git.kernel.org/stable/c/d0877c479f44fe475f4c8c02c88ce9ad43e90298
git.kernel.orghttps://git.kernel.org/stable/c/3c94212b57bedec3a386ef3da1ef00602f5c3d1d
git.kernel.orghttps://git.kernel.org/stable/c/6acf340f8c1d296bcf535986175f5d0d6f2aab09
git.kernel.orghttps://git.kernel.org/stable/c/e8d6f3ab59468e230f3253efe5cb63efa35289f7
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00007.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-082556.html

01 Record index

CVE-2025-38400

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-38400

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References